$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3e560554-5502-3ca7-8fb6-eb5d1d8e76d4.roa File: 3e560554-5502-3ca7-8fb6-eb5d1d8e76d4.roa (raw, json) Hash identifier: RztVX2EoZdJdgXwcOPd20JTzyXu7fAQYWhWTiO7/hwY= Subject key identifier: BE:90:7D:2F:B6:97:2B:10:EB:63:01:B2:54:92:C9:61:D2:12:38:9A Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584CAC786A22CFC0650AAE97A020 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3e560554-5502-3ca7-8fb6-eb5d1d8e76d4.roa Signing time: Wed 28 Jan 2026 09:56:18 +0000 ROA not before: Wed 28 Jan 2026 09:56:18 +0000 ROA not after: Tue 28 Apr 2026 08:56:18 +0000 asID: 174 IP address blocks: 66.253.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 25 Feb 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ac:78:6a:22:cf:c0:65:0a:ae:97:a0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jan 28 09:56:18 2026 GMT Not After : Apr 28 08:56:18 2026 GMT Subject: CN=4fb06b1c-d795-4209-8089-f8f176619378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:59:6c:d9:9e:1d:17:40:0a:f8:03:66:f7:d6: 6b:f4:9b:e2:b5:64:ea:93:ac:7a:b6:a1:8b:73:92: c3:b4:87:a9:4f:f3:dd:20:f0:f3:12:5e:ed:7c:c9: 64:23:57:d9:d6:23:be:b3:fb:36:f8:bb:75:b8:ca: 1d:bb:e1:e3:98:cc:50:4c:01:a0:9c:5b:4b:51:cd: 01:15:0a:2c:62:ec:89:8c:80:d5:7b:a6:b3:8a:3d: 04:10:8a:ce:79:02:77:37:46:08:40:7f:8e:13:8e: 28:08:95:98:4d:44:9f:b1:c7:89:ec:9e:e9:9b:72: 0d:e2:6f:7b:84:36:b7:db:60:11:c3:1f:a1:bf:56: 81:d8:9b:86:13:88:b2:ee:c8:44:e5:73:e0:86:74: 61:ab:c5:ec:88:fb:ba:e8:ee:e5:cf:3d:af:38:c5: a4:65:6b:14:cf:34:5b:66:35:ed:f4:c8:6e:82:02: 3f:a4:ce:31:f0:9a:ea:58:a8:52:1c:a5:4f:ba:a7: 79:2f:35:70:5c:25:f6:33:05:3a:c4:b5:58:b9:c0: 31:20:f0:59:98:25:02:e2:88:dd:aa:d3:4d:49:e4: fc:0c:98:ac:73:ad:8f:5d:d9:63:4d:9a:56:1a:22: 4a:fb:e8:69:f6:1f:e1:68:3b:35:75:f4:a8:f6:ed: 3c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:90:7D:2F:B6:97:2B:10:EB:63:01:B2:54:92:C9:61:D2:12:38:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3e560554-5502-3ca7-8fb6-eb5d1d8e76d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.253.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:44:85:47:1b:e0:80:d0:af:e6:35:24:d0:ac:6d:71:ec:f6: 37:c9:c4:fd:5f:08:01:b6:d5:01:65:6b:0e:19:34:51:b6:7c: 6e:de:25:00:63:d7:07:13:ff:b0:47:f2:eb:18:97:ec:3c:26: e0:52:2d:c1:f4:9f:db:31:07:41:51:89:6c:0c:be:87:80:04: 50:d7:8f:97:96:85:d7:c4:b3:bf:c9:5e:0e:9a:d5:33:b8:85: 6b:65:ac:bc:b5:ad:00:2e:56:05:2a:72:28:51:c4:38:2f:76: f7:1c:b0:06:c3:fb:24:f1:35:7a:0e:33:e7:3b:dc:c7:6e:d8: b2:1a:29:6a:f9:6d:f2:e0:3d:95:dc:86:20:1f:94:9e:2f:27: 84:d9:97:10:6b:0c:a3:18:bc:a8:9a:98:17:7d:79:93:37:ee: 02:a3:1a:62:a5:b1:13:d8:ab:3d:34:51:d0:d7:e9:e6:e8:94: 56:37:0d:98:26:84:b0:c2:5f:b4:24:16:f3:4e:3e:b5:a4:76: f6:f8:64:a7:8d:6d:50:ad:2a:b5:3b:84:3f:5e:61:4c:0b:19: cd:60:23:c4:e1:e6:2c:e0:aa:4e:01:8a:8d:04:99:0b:f3:a6: 5f:d7:02:c6:a2:1d:03:de:8d:23:c4:45:93:7f:fd:8e:a5:91: 6c:bf:d0:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyseGoiz8BlCq6XoCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDEyODA5NTYxOFoXDTI2MDQyODA4NTYxOFowLzEtMCsGA1UEAxMk NGZiMDZiMWMtZDc5NS00MjA5LTgwODktZjhmMTc2NjE5Mzc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplls2Z4dF0AK+ANm99Zr9JvitWTqk6x6tqGL c5LDtIepT/PdIPDzEl7tfMlkI1fZ1iO+s/s2+Lt1uModu+HjmMxQTAGgnFtLUc0B FQosYuyJjIDVe6azij0EEIrOeQJ3N0YIQH+OE44oCJWYTUSfsceJ7J7pm3IN4m97 hDa322ARwx+hv1aB2JuGE4iy7shE5XPghnRhq8XsiPu66O7lzz2vOMWkZWsUzzRb ZjXt9MhuggI/pM4x8JrqWKhSHKVPuqd5LzVwXCX2MwU6xLVYucAxIPBZmCUC4ojd qtNNSeT8DJisc62PXdljTZpWGiJK++hp9h/haDs1dfSo9u081wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL6QfS+2lysQ62MBslSSyWHSEjiaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvM2U1NjA1NTQtNTUwMi0z Y2E3LThmYjYtZWI1ZDFkOGU3NmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv1EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJhEhUcb4IDQr+Y1JNCsbXHs9jfJxP1fCAG21QFlaw4ZNFG2fG7eJQBj 1wcT/7BH8usYl+w8JuBSLcH0n9sxB0FRiWwMvoeABFDXj5eWhdfEs7/JXg6a1TO4 hWtlrLy1rQAuVgUqcihRxDgvdvccsAbD+yTxNXoOM+c73Mdu2LIaKWr5bfLgPZXc hiAflJ4vJ4TZlxBrDKMYvKiamBd9eZM37gKjGmKlsRPYqz00UdDX6ebolFY3DZgm hLDCX7QkFvNOPrWkdvb4ZKeNbVCtKrU7hD9eYUwLGc1gI8Th5izgqk4Bio0EmQvz pl/XAsaiHQPejSPERZN//Y6lkWy/0Ps= -----END CERTIFICATE-----Generated at Mon Feb 23 22:26:30 2026 by rpki-client